ci: vendor validation scripts and remove remote action pins

[hyperpolymath]

Automated PR to fix CI after deleted actions.

[gitar-bot]

CI failed: A2ML manifest validation failed during the CI run due to missing required identity fields and SPDX-License-Identifier headers in the scanned files.

Overview

1 change-related failure found in the "Validate A2ML manifests" job due to validation errors in .a2ml manifest files.

Failures

A2ML Manifest Validation Failed (confidence: high)

• Type: test
• Affected jobs: 90124817767
• Related to change: yes
• Root cause: The A2ML validation script found 2 errors across 31 scanned files: missing required identity fields (agent-id, name, or project) and missing SPDX-License-Identifier comments in the first 10 lines.
• Suggested fix: Update the affected .a2ml manifest files to include an SPDX-License-Identifier in the first 10 lines and supply the required identity fields.

Summary

• Change-related failures: 1 (A2ML validation failure caused by manifest content issues)
• Infrastructure/flaky failures: 0
• Recommended action: Fix the manifest files locally or adjust the validation script/manifests to satisfy the A2ML schema requirements.

Code Review ✅ Approved

Vendors validation scripts and removes remote action pins to fix CI workflows. No issues found.

Auto-approved: No blocking issues found.
Please see Auto-approve Docs for details on setting custom approval criteria.

Tip

Comment Gitar fix CI or enable auto-apply: gitar auto-apply:on

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing less information.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}

[gitar-bot]

Gitar has auto-approved this PR (configure)